Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 14.04 Critical Advisory: USN-2311-1 on pyCADF Information Exposure

ubuntu
Calendar Grey August 11, 2014
Scroller Ubuntu
A critical advisory on the pyCADF vulnerability in Ubuntu 14.04 that reveals sensitive information and authentication tokens.
pyCADF could be made to expose sensitive information.

Summary

pyCADF could be made to expose sensitive information.

Software Description:

- python-pycadf: implementation of DMTF Cloud Audit (CADF) data model

Details:

Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens.

An attacker could possibly use this issue to obtain authentication tokens

used in REST requests.

Topics%20covered

Topics Covered

security advisory critical Ubuntu update instructions information disclosure python-pycadf

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  python-pycadf                   0.4.1-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2311-1

CVE-2014-4615

Severity
critical
Lowest
Low
Medium
High
Critical

August 11, 2014

Topics%20covered

Topics Covered

security advisory critical Ubuntu update instructions information disclosure python-pycadf

Package Information

https://launchpad.net/ubuntu/+source/python-pycadf/0.4.1-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.